# setUpAgent

Make an organisation agent, or change one you own or manage, exactly as the Agents screens do (your role and your plan decide what you may do). Without agent it makes a new agent, yours: name, mandate (what it is for and how it should work, in plain words) and access (the places it may reach and one level: read, write or delete; no places is the whole organisation, which only owners and admins may give) are needed. With agent (its id or exact name) it changes only what you send: name, description, mandate, tools (as permission sets in toolSets, what it works on and how far, by name in tools, or allTools), access, sharing (shareWith, stopSharingWith) and status (active, paused or archived). An agent is never given tools for the organisation's members, teams, permissions, the organisation itself and its settings, billing, sign-up, the Brain's settings or other agents. Through a connection an agent always asks before any change: an agent that acts without asking anyone first, and any change to one that already does, are the person's to make in Stable Baseline. Its access never reaches further than you, or this connection, do: a kind of thing the connection cannot reach is left off, and the answer's access says what it reaches. An agent that reaches further than this connection keeps its mandate, tools and approval level, and is not resumed or restored, through it: here you may rename it, describe it, pause or archive it, or narrow its access to what the connection reaches. Removing an agent is the person's, on its page. Needs "Set up agents" on this connection. Read agents with listAgents (agentId); set up their duties with setUpAgentDuty.

Agent View of the PolicyLayer registry record for `setUpAgent`. HTML page: https://policylayer.com/tools/io-stablebaseline-sb/setupagent

## Facts

- Tool: `setUpAgent`
- Server: Stable Baseline (`https://api.stablebaseline.io/functions/v1/cloud-serve/mcp`) — https://policylayer.com/tools/io-stablebaseline-sb.md
- Homepage: https://github.com/stablebaseline/mcp
- Risk category: Write (Medium risk)
- Registry record: grade F, identity unverified
- Server auth posture: open
- Server CORS policy: https://app.stablebaseline.io
- Server rate-limited: no
- Parameters: 12
- Recommended policy verdict: Rate-limited

## Parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `name` | string | no | 1 to 80 characters. |
| `agent` | string | no | An existing agent's id or exact name. Leave it out to make a new agent. |
| `tools` | array | no | More tools it may use, by the names this server lists them under (such as getDocument, queryDatabaseRows, kg_search), beside toolSets or instead of them. An age |
| `access` | object | no | What it may reach, never more than you hold: one level for the places listed. No places means the whole organisation, which only owners and admins may give. |
| `status` | string | no | active resumes or restores it. |
| `mandate` | string | no | What it is for and how it should work, in plain words: at most 8,000 characters. |
| `allTools` | boolean | no | Every tool its access allows, now and later (tools is then ignored). |
| `toolSets` | array | no | What it works on, and how far, as the Agents screen offers it: each { set, level }. Sets: documents (documents and their folders), diagrams (diagrams and pictur |
| `shareWith` | array | no | Who else may use or manage it: other people and teams (its owner has it already). |
| `description` | string | no | One line, at most 200 characters. |
| `approvalMode` | string | no | Through a connection an agent always asks before any change (`confirm`). The levels that act without asking are chosen in Stable Baseline. |
| `stopSharingWith` | array | no |  |

Parameters from the server's own tool schema.

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "setUpAgent",
    "arguments": {}
  }
}
```

## Why setUpAgent is rated Medium

An AI agent can call setUpAgent faster than any human can review: one bad instruction and it creates or modifies resources in Stable Baseline by the hundred, each call as confident as the last.

Risk signals: High parameter count (23 properties)

## Use case

AI agents use setUpAgent to create or update resources in Stable Baseline, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Stable Baseline environment.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Stable Baseline:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "setUpAgent": {
      "limits": [
        {
          "counter": "setupagent_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on Stable Baseline (221)

- `autoDesignWhiteboard` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/autodesignwhiteboard.md
- `cancelAllKgInScope` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/cancelallkginscope.md
- `cancelKgBuildBatch` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/cancelkgbuildbatch.md
- `delegateToAgent` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/delegatetoagent.md
- `deleteDatabase` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/deletedatabase.md
- `deleteDatabaseRows` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/deletedatabaserows.md
- `deleteDiagramInDocument` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/deletediagramindocument.md
- `deleteDocument` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/deletedocument.md
- `deleteFolder` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/deletefolder.md
- `deleteImageInDocument` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/deleteimageindocument.md
- `deleteImprovement` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/deleteimprovement.md
- `deleteImprovementCategory` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/deleteimprovementcategory.md
- `deleteImprovementComment` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/deleteimprovementcomment.md
- `deletePlan` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/deleteplan.md
- `deletePlanComment` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/deleteplancomment.md
- `deletePlanPhase` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/deleteplanphase.md
- `deleteResourcePermission` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/deleteresourcepermission.md
- `deleteTaskDependency` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/deletetaskdependency.md
- `deleteTeam` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/deleteteam.md
- `deleteVegaDataFile` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/deletevegadatafile.md
- `deleteWhiteboard` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/deletewhiteboard.md
- `getAgentRun` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/getagentrun.md
- `previewKgScopeChange` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/previewkgscopechange.md
- `previewSubscriptionChange` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/previewsubscriptionchange.md
- `removeMember` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/removemember.md
- `removeTeamMember` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/removeteammember.md
- `removeWorkspaceMember` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/removeworkspacemember.md
- `reorderDocuments` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/reorderdocuments.md
- `resetDocumentInBrain` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/resetdocumentinbrain.md
- `revokeTeamWorkspaceAccess` — Destructive — https://policylayer.com/tools/io-stablebaseline-sb/revoketeamworkspaceaccess.md
- …and 191 more: https://policylayer.com/tools/io-stablebaseline-sb.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=io-stablebaseline-sb · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/io-stablebaseline-sb